Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File: 7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier: /hSM0jJHPKQHzBrDQkLpeaATsp9OGs8W+xcvo/gb6m4=
Subject key identifier: 49:46:5B:AA:CF:0D:0C:C4:D3:95:99:74:AC:29:C2:EF:EB:63:B8:4C
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer: /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial: 01A001A5B3636D7D726CC8A86B02DC3F82F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number: 07F5
Signing time: Fri 14 Aug 2026 19:00:31 +0000
Manifest this update: Fri 14 Aug 2026 19:00:31 +0000
Manifest next update: Sat 15 Aug 2026 19:00:31 +0000
Files and hashes: 1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: XGHFlFDiJxuXK0AeFI62dW69VJaPXMwiV5f4ZUa+cdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:b3:63:6d:7d:72:6c:c8:a8:6b:02:dc:3f:82:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Validity
Not Before: Aug 14 19:00:31 2026 GMT
Not After : Aug 15 19:00:31 2026 GMT
Subject: CN=49465baacf0d0cc4d3959974ac29c2efeb63b84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f7:f8:de:62:db:f5:55:e5:a8:03:48:86:11:
79:d8:a7:45:dd:4e:3a:3a:07:4b:2b:f0:21:bf:46:
b3:a2:4f:78:b8:b0:c1:e6:80:8a:ba:87:7e:b6:54:
02:1a:cb:27:ca:7d:ce:4f:b1:21:d6:9c:02:74:14:
d5:61:11:e1:34:46:09:e5:52:d0:5d:5b:8f:d4:f2:
f4:fe:57:d3:c8:6e:5b:06:de:98:fa:a7:37:0d:34:
d8:a2:97:07:cc:c0:f4:9f:54:d3:9c:2f:cf:1b:ff:
9f:fc:60:07:71:0e:3d:00:e3:f5:4d:f6:76:40:90:
2d:df:15:5c:5e:ef:01:99:61:4e:e4:e0:be:2c:4c:
88:70:e0:f4:41:e3:1e:91:b8:c4:06:63:42:84:91:
2e:aa:f5:86:60:e9:dc:8d:af:f9:09:04:4f:de:bc:
e3:e1:d8:ce:13:6d:96:4d:1d:97:f8:14:69:70:96:
17:75:54:d4:1a:1b:45:40:1f:41:4b:24:38:f2:af:
41:10:d3:c9:9e:c8:6a:a9:59:c2:0e:b7:1d:73:ab:
5c:9f:08:c1:e3:4b:04:0a:a0:ab:f9:3f:b2:ad:5b:
93:74:a9:eb:ce:46:36:2f:6f:92:5c:88:80:0e:25:
9d:c9:12:7b:d4:e5:d7:b9:c1:79:07:a5:3c:bf:c6:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:46:5B:AA:CF:0D:0C:C4:D3:95:99:74:AC:29:C2:EF:EB:63:B8:4C
X509v3 Authority Key Identifier:
keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a0:46:36:b1:dd:d5:8a:79:6a:d3:f6:74:5e:03:44:cd:89:
a4:eb:85:b1:e7:db:b5:26:3f:d1:fa:0d:2d:cf:82:e4:f0:f6:
37:d1:e0:ca:53:a3:2f:68:53:d2:b0:cd:35:90:cb:a5:91:e6:
5c:e8:7c:06:83:42:02:1c:8c:de:fd:63:d3:cc:32:1b:55:fd:
79:1a:f7:0e:d0:e3:48:81:09:1c:bb:85:99:c0:6d:9d:13:9f:
a8:0e:83:24:b0:41:2c:99:d8:6a:ba:fc:a8:22:ec:70:dd:b7:
55:3d:8e:4b:f8:21:06:5d:b0:33:91:e1:71:50:ed:4d:12:d2:
7e:c5:ed:26:dc:39:42:b8:f3:3e:5f:b9:54:80:f4:0c:b5:38:
50:d5:72:f6:0f:42:44:24:3e:09:07:d5:ba:69:2f:ba:37:e1:
c5:c3:43:5b:d6:aa:f0:ba:3c:e6:d8:2c:33:ec:08:c5:a8:4b:
96:b9:72:86:57:fc:3d:fd:a9:6b:30:36:91:d9:5c:c2:f5:d0:
c6:87:8b:31:fe:da:96:b4:5c:77:ed:4c:de:8d:41:29:0e:f2:
03:c0:f1:3f:50:22:09:9f:01:35:a6:91:21:5c:df:e7:56:9c:
e0:ef:1c:ac:26:1e:05:0d:e9:55:39:a0:4d:24:b5:86:a7:66:
65:e7:c9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:24 2026 by rpki-client